---
typeId: req
recordId: benac-sec-002
fields:
  title: Secrets do not replicate by default
  statement: Secret material shall not replicate by default through Couch/Pouch
    replication, package export, package bundle export, remote storage upload,
    or package import.
  rationale: Replication and storage should not spread credentials.
  verification: Export/replication/storage tests confirm secrets excluded or
    encrypted under explicit user policy.
  testable: true
  status: draft
  area: BENAC-SEC
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.13 Secrets, protected local state, and redaction
  order: 149
---
